TI-2022-26396 CVE-2022-50944 · GHSA-377g-gwp8-j5fxAero CMS 0.0.1 PHP Code Injection via posts.phpPriority HIGH 73Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the image parameter.CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00347 · Published 2026-05-10 · No fix listed CWE-94